2024-06-13_97fd292402d6bd690e5c64ba3c0d3714_bkransomware_karagany

General

Target
2024-06-13_97fd292402d6bd690e5c64ba3c0d3714_bkransomware_karagany
Size 106KB
Sample240613-ldhllswgrm
SHA256 29d56db8bde9fe174d1ebc7324368d2644277d84346ffe10946406dc2ed7094a
MD5 97fd292402d6bd690e5c64ba3c0d3714
SHA1 dbaf4c0fbced474cef6851f384840bd0c5c06003
SHA512 ba90d5ae2cd2d1c4be4d3c109bac52f75f7f4d1087e4192058cb781a56d0a3cb9a7529003a00e20f6501d1976ea37d6bca2f0651b1c555ac04144f58694e79fc
SSDEEP 1536:x1x6wqZtj7KAJKfvPWdoSWmwf6F4Yk3ZSUKY1IOlnToIfrc+xsWjcdrY7EHu:x1JGqAgvCRw44Yk/NTBfV+s7d
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-13_97fd292402d6bd690e5c64ba3c0d3714_bkransomware_karagany

File Explorer

2024-06-13_97fd292402d6bd690e5c64ba3c0d3714_bkransomware_karagany

.exe 106KB

2024-06-13_97fd292402d6bd690e5c64ba3c0d3714_bkransomware_karagany

IMPHASH a272c1b229ef8240487a9f8ef7d66c45
SHA256 29d56db8bde9fe174d1ebc7324368d2644277d84346ffe10946406dc2ed7094a
MD5 97fd292402d6bd690e5c64ba3c0d3714
SHA1 dbaf4c0fbced474cef6851f384840bd0c5c06003
SHA512 ba90d5ae2cd2d1c4be4d3c109bac52f75f7f4d1087e4192058cb781a56d0a3cb9a7529003a00e20f6501d1976ea37d6bca2f0651b1c555ac04144f58694e79fc
SSDEEP 1536:x1x6wqZtj7KAJKfvPWdoSWmwf6F4Yk3ZSUKY1IOlnToIfrc+xsWjcdrY7EHu:x1JGqAgvCRw44Yk/NTBfV+s7d
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

19616

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTempPathA SetFileAttributesA CreateProcessA CloseHandle Sleep DeleteFileA LCMapStringW HeapSize GetStringTypeW CreateFileW HeapReAlloc HeapAlloc GetLastError HeapFree GetCommandLineW IsDebuggerPresent EncodePointer DecodePointer IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection RtlUnwind GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW ExitProcess GetModuleHandleExW GetProcAddress AreFileApisANSI MultiByteToWideChar WideCharToMultiByte WriteFile GetModuleFileNameW GetProcessHeap GetConsoleCP GetConsoleMode SetLastError GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW ReadFile ReadConsoleW SetStdHandle FlushFileBuffers SetFilePointerEx IsValidCodePage GetACP GetOEMCP GetCPInfo LoadLibraryExW OutputDebugStringW WriteConsoleW SetEndOfFile

ole32

CoCreateGuid

ws2_32

recv send closesocket connect htons socket inet_addr WSAStartup

Sharing

General

Malware Config

Signatures

File Explorer

2024-06-13_97fd292402d6bd690e5c64ba3c0d3714_bkransomware_karagany

kernel32

ole32

ws2_32

generic